Skip to content
Sign in
CVE-2023-289754.6MediumCWE-394

CVE-2023-28975: Junos OS: The kernel will crash when certain USB devices are inserted

Juniper Networks · Junos OS

Vendor fix available · Affected: Juniper Networks Junos OS · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.3%probability of exploitation in the next 30 days
21st percentile
050100

Higher than 21% of scored CVEs

4.6MediumCVSS 3.1
LowMedium

DescriptionCVE.org

An Unexpected Status Code or Return Value vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated attacker with physical access to the device to cause a Denial of Service (DoS). When certain USB devices are connected to a USB port of the routing-engine (RE), the kernel will crash leading to a reboot of the device. The device will continue to crash as long as the USB device is connected. This issue affects Juniper Networks Junos OS: All versions prior to 19.4R3-S10; 20.2 versions prior to 20.2R3-S7; 20.3 versions prior to 20.3R3-S6; 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S2; 22.1 versions prior to 22.1R2-S2, 22.1R3; 22.2 versions prior to 22.2R2, 22.2R3; 22.3 versions prior to 22.3R1-S1, 22.3R2; 22.4 versions prior to 22.4R2.

Affected products1

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Juniper Networks · Junos OSbefore 19.4R3-S10; from 20.2 before 20.2R3-S7; from 20.3 before 20.3R3-S6; from 20.4 before 20.4R3-S5; from 21.1 before 21.1R3-S4; from 21.2 before 21.2R3-S4 and 6 more

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV
Not listed
Public check
No public nuclei template
Published
April 2023

CoverageNo articles yet

No CyberSIXT article names CVE-2023-28975 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

Updated AboutDevelopersSign in